Important: Kernel Security and Bug Fix Update for AlmaLinux 9
Summary
ALSA-2023:0334: Important: kernel security and bug fix update. Affects bpftool versions < 5.14.0-162.12.1.el9_1. Fixed in 5.14.0-162.12.1.el9_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of the AlmaLinux 9 operating system. It provides essential functionality and interfaces for all other software running on the system. The kernel is responsible for managing system resources, handling hardware devices, and enforcing security policies.
Vulnerability Detail
This update addresses multiple security vulnerabilities in the kernel. These vulnerabilities include a watch queue race condition that can lead to privilege escalation (CVE-2022-2959), memory corruption in AX88179_178A based USB ethernet devices (CVE-2022-2964), incorrect GPU TLB flush leading to random memory access (CVE-2022-4139), buffer overflow in nfsd by RPC message over TCP (CVE-2022-43945), unbounded length leading to buffer overflow in i2c (CVE-2022-3077), and unprivileged users being able to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594). These vulnerabilities could potentially allow attackers to gain elevated privileges, execute arbitrary code, or cause denial of service.
How To Fix
Minimum fixed version
5.14.0-162.12.1.el9_1
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses multiple security vulnerabilities in the kernel of AlmaLinux 9. It is recommended to update the kernel packages to version 5.14.0-162.12.1.el9_1 or later to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bpftool →
FAQ
These vulnerabilities could allow attackers to gain elevated privileges, execute arbitrary code, or cause denial of service.
At the time of this advisory, there are no known exploits for these vulnerabilities.
Yes, a system restart is required after applying the kernel update.
No, a system restart is necessary to fully apply the kernel update.
No specific workarounds are mentioned for these vulnerabilities. It is recommended to apply the kernel update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
